IN THE CLAIMS 

Please amend the claims as follows: 

1. (Canceled) 

2. (Currently Amended) The apparatus of claim [[1]] 1_ wherein 
said security facility further comprises an encryption object. 

3. (Previously Presented) The apparatus of claim 2 wherein said 
security facility further comprises security support provider 
interface. 

4. (Previously Presented) The apparatus of claim 3 wherein said 
security facility further comprises a decryption object. 

5. (Previously Presented) The apparatus of claim 4 wherein said 
user terminal is responsively coupled to a data base management 
system via a publically accessible digital data communication 
network and wherein said service application is located within 
said data base management system. 

6. (Canceled) A method of handling a service request from a 
client application to a service application, comprising: 
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a. embedding a security facility within a communication 
class library; 

b. generating a service request within a user terminal using 
said client application; 

c. transferring said service request from said client 
application to said service application located within a 
computer which is different from said user terminal; 

d. receiving said service request by said service 
application; 

e. honoring said service request by said service 
application; and 

f. automatically implementing security functions from said 
embedded security facility during said step which honors 
said service request. 

7. (Currently Amended) A method according to claim G further of 
handling a service request from a client application to a service 
application, comprising^ 

a. embedding a security facility within a communication class 
library; 

b. generating a service request within a user terminal using said 
client application; 
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c. transferring said service request from said client 
application to said service application located within a computer 
which is different from said user terminal; 

d. receiving said service request by said service application; 

e. honoring said service request by said service application; 

f. automatically implementing security functions from said 
embedded security facility during said step which honors said 
service request; and 

having a context token transferred from said client to said 
service application identifying required security functions from 
said embedded security facility. 

8. (Previously Presented) A method according to claim 7 wherein 
said transferring step further comprises transferring said 
service request to said service application via a publically 
accessible digital data communication network. 

9. (Previously Presented) A method according to claim 8 wherein 
said client application is located within said user terminal. 

10. (Previously Presented) A method according to claim 9 
further comprising a data base management system wherein said 
service application is located within said data base management 
system. 
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11-16. (Canceled) 



17. (Currently Amended) The data processing system according to 
claim [[16]] 10 wherein said context token is transferred from 
said client application to said service application along with 
said service request. 

18-21. (Canceled) 
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